SQL Injection Affecting llama-index-packs-finchat package, versions [,0.3.0)
Threat Intelligence
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-LLAMAINDEXPACKSFINCHAT-9510941
- published23 Mar 2025
- disclosed20 Mar 2025
- creditlife-team2024
Introduced: 20 Mar 2025
NewCVE-2024-12909 (opens in a new tab)How to fix?
Upgrade llama-index-packs-finchat to version 0.3.0 or higher.
Overview
llama-index-packs-finchat is a llama-index packs implementation of a hierarchical agent for finance chat.
Affected versions of this package are vulnerable to SQL Injection via the run_sql_query() function in the database agent. An attacker can inject raw PostgreSQL statements into a prompt and have the resulting queries executed on the backing database. By leveraging PostgreSQL's lo_from_bytea() function and compromising another file on the target server, this vulnerability can allow code execution on the operating system.